Medium ELSA-2017-0020 5 CVEs

Moderate: gstreamer1-plugins-good security update (Oracle Linux 7)

Published Jan 5, 2017 · Updated Jan 5, 2017

Ecosystem: Oracle Linux

Summary

[1.4.5-3]
- Remove insecure FLX plugin
Resolves: rhbz#1400892

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	gstreamer1-plugins-good	0:1.4.5-3.el7_3

Vulnerabilities 5

Unscored —

CVE-2016-9634

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer…

gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good gst-plugins-good0.10 Debian Ubuntu Alpine

Jan 27, 2017
Unscored —

CVE-2016-9635

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer…

gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good gst-plugins-good0.10 Debian Ubuntu Alpine

Jan 27, 2017
Unscored —

CVE-2016-9636

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer…

gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good gst-plugins-good0.10 Debian Ubuntu Alpine

Jan 27, 2017
Unscored —

CVE-2016-9807

The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a den…

gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good0.10 Debian Ubuntu

Jan 13, 2017
Unscored —

CVE-2016-9808

The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write a…

gst-plugins-good1.0 gst-plugins-good1.0 gst-plugins-good gst-plugins-good0.10 Debian Ubuntu Alpine

Jan 13, 2017